All Products: What configuration needs to be setup to protect against PrintNightmare?

Products

• Carbon Black App Control (formerly Cb Protection)
• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

What configuration changes need to be made to protect againsts PrintNightmare

Environment

• Carbon Black Cloud: All Versions
• EDR: All Versions
• App Control: All Versions

Resolution

The Carbon Black Threat Research team has published an analysis of PrintNightmare with recommended configurations: https://community.carbonblack.com/t5/Threat-Research-Docs/TAU-TIN-PrintNightmare/ta-p/105222

Additional Information

The TAU-TIN team regularly published articles on critical vulnerabilities and how to best prevent attacks. Follow the Threat Research space for the latest updates.